Spam ZOOM email or legit? > REQUEST to change ZOOM password

[JoyceMSullivan]

I received this email today from ZOOM requesting I change my password. Looks legit though I'm not sure based on the underlying sender name..

Screenshot with my PII removed.

Can you advise? thx

[Vinnie · Accepted solution]

Hello Joyce. 
As a general rule (not just for this case), receiving a request to change your password that you have not requested, it most likely is a sign of either scam, phishing,  or  that maybe somebody might be trying to hack into your account.

In any case, even if it is legit, I strongly recommend never to follow/click any link or file included on such notification if you are not sure; it is always better for you to go directly to change your password in the regular way you do it: i.e. going directly to https://zoom.us or your company's vanity URL ( i.e. https://your-company.zoom.us)  or if you are using SSO (Single-Sign-On) then whatever mechanism you have been provided to.

[Vinnie · Accepted solution]

Hello Joyce. 
As a general rule (not just for this case), receiving a request to change your password that you have not requested, it most likely is a sign of either scam, phishing,  or  that maybe somebody might be trying to hack into your account.

In any case, even if it is legit, I strongly recommend never to follow/click any link or file included on such notification if you are not sure; it is always better for you to go directly to change your password in the regular way you do it: i.e. going directly to https://zoom.us or your company's vanity URL ( i.e. https://your-company.zoom.us)  or if you are using SSO (Single-Sign-On) then whatever mechanism you have been provided to.

[erblau2000]

Hey Vinnie. Im on the zoom website but its not obvious where I need to click to change my zoom password. I am VERY literal! Can you tell me which settings to select to do this (in response to an email to cahnge a compromised password)!

[ChrisO]

Hello erblau2000,

Once you have signed into Zoom, click on My Account. Once you are in the account settings click on Profile and scroll down o the "Sign In" section. Find where it says "SIgn-In Password" and click "Edit" to the right of that. After you enter your old password and then a new password be sure to hit save.

[ChrisO · Accepted solution]

Hi Joyce,

As Vinnie stated it is a good rule of thumb to never click on any link in an email and instead visit sites directly. That being said the email in question does appear to be legit and Zoom does send out these kinds of notifications. You can read more on how Zoom is actively trying to protect its users here https://support.zoom.us/hc/en-us/articles/4421913733261-Receiving-a-compromised-account-notification.